CVE-2022-0711
Fixed in a distro release EPSS 17%
A flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header. This flaw could allow an attacker to send crafted HTTP response packets which lead to an infinite loop, eventually resulting in a denial of service condition. The highest threat from this vulnerability is availability.
Products: haproxy, redhat openshift_container_platform, redhat software_collections, redhat enterprise_linux, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.12 | haproxy | 2.2.21-r0 |
| Alpine 3.13 | haproxy | 2.2.21-r0 |
| Debian 11 | haproxy | 2.2.9-2+deb11u3 |
| Debian 12 | haproxy | 2.4.13-1 |
| Debian 13 | haproxy | 2.4.13-1 |
| Debian 14 | haproxy | 2.4.13-1 |
| Red Hat openshift 4.6 | haproxy | 0:2.0.16-5.el8 |
| Red Hat openshift 4.6 | haproxy | 0:2.0.16-3.el7 |
| Red Hat openshift 4.6 | haproxy-debuginfo | 0:2.0.16-3.el7 |
| Red Hat openshift 4.6 | haproxy-debugsource | 0:2.0.16-5.el8 |
| Red Hat openshift 4.6 | haproxy20 | 0:2.0.16-5.el8 |
| Red Hat openshift 4.6 | haproxy20 | 0:2.0.16-3.el7 |
| Red Hat openshift 4.6 | haproxy20-debuginfo | 0:2.0.16-5.el8 |
| Red Hat openshift 4.6 | jenkins-2-plugins | 0:4.6.1650364520-1.el8 |
| Red Hat openshift 4.7 | haproxy | 0:2.0.19-3.el8 |
| Red Hat openshift 4.7 | haproxy | 0:2.0.19-3.el7 |
| Red Hat openshift 4.7 | haproxy-debuginfo | 0:2.0.19-3.el7 |
| Red Hat openshift 4.7 | haproxy-debugsource | 0:2.0.19-3.el8 |
| Red Hat openshift 4.7 | haproxy20 | 0:2.0.19-3.el7 |
| Red Hat openshift 4.7 | haproxy20 | 0:2.0.19-3.el8 |
| Red Hat openshift 4.7 | haproxy20-debuginfo | 0:2.0.19-3.el8 |
| Red Hat openshift 4.8 | haproxy | 0:2.2.13-3.el8 |
| Red Hat openshift 4.8 | haproxy-debugsource | 0:2.2.13-3.el8 |
| Red Hat openshift 4.8 | haproxy22 | 0:2.2.13-3.el8 |
| Red Hat openshift 4.8 | haproxy22-debuginfo | 0:2.2.13-3.el8 |
| Red Hat openshift 4.9 | haproxy | 0:2.2.15-4.el8 |
| Red Hat openshift 4.9 | haproxy-debugsource | 0:2.2.15-4.el8 |
| Red Hat openshift 4.9 | haproxy22 | 0:2.2.15-4.el8 |
| Red Hat openshift 4.9 | haproxy22-debuginfo | 0:2.2.15-4.el8 |
| Red Hat openshift 4.9 | jenkins-2-plugins | 0:4.9.1647580879-1.el8 |
| SUSE Linux Enterprise High Availability Extension 15 SP4 | haproxy | 2.4.8+git0.d1f8d41e0-150400.3.3.13 |
| Ubuntu 20.04 LTS | haproxy | 2.0.13-2ubuntu0.5 |
| openSUSE Leap 15.4 | haproxy | 2.4.8+git0.d1f8d41e0-150400.3.3.13 |
| openSUSE Tumbleweed | haproxy | 2.5.4+git0.e55ab4208-1.1 |